Watch
1
Fork
You've already forked kernel_a52xq
0
mirror of https://github.com/a52xq-dev/kernel.git synced 2026-10-18 21:58:11 +07:00
kernel_a52xq/drivers/scsi/fnic
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Pan Bian 6971ba9e44 scsi: fnic: fix use after free
[ Upstream commit ec990306f77fd4c58c3b27cc3b3c53032d6e6670 ]

The memory chunk io_req is released by mempool_free. Accessing
io_req->start_time will result in a use after free bug. The variable
start_time is a backup of the timestamp. So, use start_time here to
avoid use after free.

Link: https://lore.kernel.org/r/1572881182-37664-1-git-send-email-bianpan2016@163.com
Signed-off-by: Pan Bian <bianpan2016@163.com>
Reviewed-by: Satish Kharat <satishkh@cisco.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-10-01 13:14:26 +02:00
..
cq_desc.h
cq_enet_desc.h
cq_exch_desc.h
fcpio.h
fnic.h
fnic_attrs.c
fnic_debugfs.c
fnic_fcs.c
fnic_fip.h
fnic_io.h
fnic_isr.c
fnic_main.c
fnic_res.c
fnic_res.h
fnic_scsi.c scsi: fnic: fix use after free 2020-10-01 13:14:26 +02:00
fnic_stats.h
fnic_trace.c
fnic_trace.h
Makefile
rq_enet_desc.h
vnic_cq.c
vnic_cq.h
vnic_cq_copy.h
vnic_dev.c
vnic_dev.h
vnic_devcmd.h
vnic_intr.c
vnic_intr.h
vnic_nic.h
vnic_resource.h
vnic_rq.c
vnic_rq.h
vnic_scsi.h
vnic_stats.h
vnic_wq.c
vnic_wq.h
vnic_wq_copy.c
vnic_wq_copy.h
wq_enet_desc.h